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Abstract — A new random geometric graph model, the so-called 
secrecy graph, is introduced and studied. The graph represents 
a wireless network and includes only edges over which secure 
communication in the presence of eavesdroppers is possible. 
The underlying point process models considered are lattices 
and Poisson point processes. In the lattice case, analogies to 
standard bond and site percolation can be exploited to determine 
percolation thresholds. In the Poisson case, the node degrees are 
determined and percolation is studied using analytical bounds 
and simulations. It turns out that a small density of eavesdroppers 
already has a drastic impact on the connectivity of the secrecy 
graph. 

I. Introduction 

There has been growing interest in information-theoretic 
secrecy. To study the impact of the secrecy constraint on 
the connectivity of ad hoc networks, we introduce a new 
type of random geometric graph, the so-called secrecy graph, 
that represents the network or communication graph including 
only links over which secure communication is possible. We 
assume that a transmitter can choose the rate very close to the 
capacity of the channel to the intended receiver, so that any 
eavesdropper further away than the receiver cannot intercept 
the message. This translates into a simple geometric constraint 
for secrecy which is reflected in the secrecy graph. In this 
initial investigation, we study some of the properties of the 
secrecy graph. 

II. The Secrecy Graph 

Let G — {(/), E) be a geometric graph in W^, where 
(j) = {xi] C represents the locations of the nodes, also 
referred to as the "good guys". We can think of this graph 
as the unconstrained network graph that includes all possible 
edges over the good guys could communicate if there were no 
secrecy constraints. 

Take another set of points -0 — {Vi} C representing 
the locations of the eavesdroppers or "bad guys". These are 
assumed to be known to the good guys. 

Let Dx{r) be the (closed) d-dimensional ball of radius 
r centered at x, and let 6{x,y) = \\x — y\\ be a distance 
metric, typically Euclidean distance. Further, let (l){A) and 
ip{A) denote the number of points of (f>oi tp falling in A C K.''. 

Based on G, we define the following secrecy graphs (SGs): 

The directed secrecy graph: G — {(j), E). Replace all edges 
in E by two directional edges. Then remove all edges Xix] 
for which i/j {Dxi{6{xi,Xj))) > 0, i.e., there is at least one 
eavesdropper in the ball. 




(a) Directed SG G 



(c) Enhanced SG G' 



(b) Basic SG G 

Fig. 1. Example for secrecy graphs. The dots are the good guys, the cross 
the eavesdropper. The underlying graph is assumed to be fully connected so 
that the secrecy graphs include all edges along which secure communication 
is possible. 



From this directed graph, two undirected graphs are derived: 
The basic secrecy graph: G = (0, E), where the (undi- 
rected) edge set E is 

E = {xiXj : XiXj G E and Xjxl G E} . 

The enhanced secrecy graph: G' = {4>, E'), where 

E' = {xiXj : XiXj E E 01 xJxl E E} . 

Clearly, E C E'. The difference is that edges in E permit 
secure bidirectional communication while edges in E' only 
allow secure communication in one direction. However, this 
one-way link may be used to transmit a one-time pad so that 
the other node can reply secretly. In doing so, the link capacity 
would drop from 1/2 in each direction to 1/3. Fig. [T] shows 
an example in for the three types of secrecy graphs, based 
on the same underlying fully connected graph G. 

One way to assess the impact of the secrecy requirement is 
to determine the secrecy ratios 



_\E\ _ N ^ , _ \E'\ _ N' 

'^^Je\~n' ~]e\~^ 



(1) 



where N, N' ^ N, and N are the average node degrees of 
the respective graphs. For 77 « 1, the impact of the secrecy 
requirement is negligible while for small 77 it severely prunes 
the graph. 

For the directed graph, the mean in- and out-degrees are 
equal, so we define N = 7V°"* = iV'" = \E\/\(t)\. Since the 
edge sets of G and G' are a partition of the edge set of the 
undirected multigraph containing all edges in G, the following 
holds: 



Fact 1 The mean degrees are related by 

N + N' = 27V'" = 27V°"' . 



(2) 



Furthermore, the degrees of all nodes x £ (p are bounded by 

TV, sc: min{7V^, 7V°"*} sc: max{iV^, iV°"'} 

^ s$ N'^' + AT™* . (3) 

In the example in Fig.[I] © yields 10/9 + 22/9 = 32/9. 

These graphs become interesting if the locations of the 
vertices are stochastic point processes. We will use $ and 
^' as the corresponding random variables. 

Our goal is to study the properties of the resulting random 
geometric graphs, including degree distributions and perco- 
lation thresholds. We will consider two cases, lattices and 
Poisson point processes. 

A. Lattice model 

Let the underlying graph be the standard square lattice in 
I?, i.e., G = L^, where edge exists between all pairs of points 
with Euclidean distance 1. Let be obtained from random 
independent thinning of a regular point set where each point 
exists with probability p, independently of all others. Let the 
corresponding secrecy graphs be denoted as Gp, Gp, and G'^. 
Let 0{p) be the probability that the component containing the 
origin is infinitqj. Then the percolation threshold is defined as 



= inf{p : e{p) = 0} , 



(4) 



B. Poisson model 

Let the underlying graph be Gilbert's disk graph Gr [1], 
where $ is a Poisson point process (PPP) of intensity 1 in 
M? and two vertices are connected if their distance is at most 
r. is another, independent, PPP of intensity A. Denote the 
secrecy graphs by Ga.t-, G\_r, and G^ With 9{X,r) being 
the probability that the component containing the origin (or 
any arbitrary fixed node) is infinite, the percolation threshold 
radius for G,- is 



re = sup{r : 61(0, r) 0} « L198 , 



(5) 



where the subscript G indicates that this is Gilbert's critical 
radius which is not known exactly but the bounds 1.1979 < 
Vc < 1.1988 were established with 99.99% confidence in [2]. 
For radii larger than tq, we define 



A,(r) ^inf{A : 0(A,r) =0}, r > tq. 



(6) 



For the analyses, we assume that there is a node in $ at the 
origin. This does not affect the distributional properties of the 
PPP 

The parameter r indicating the maximum range of trans- 
mission can be related to standard communication parameters 
as follows: Assume a standard path loss law with attenuation 
exponent a, a transmit power P, a noise floor W, and a 
minimum SNR 8 for reliable communication. Then 

'in the directed case, to be precise, we consider oriented percolation and 
let 8{p) be the probability that the out-component is finite, i.e., that there are 
directed paths from the origin to an infinite number of nodes. Alternatively 
(or in addition) we could consider the in-component of the origin. 



in. Properties of the Lattice Secrecy Graphs 
Consider first the graph GJ, for the case where a bad guy is 

placed (with probability p) in the middle of each edge in L^, 

i.e., 

^ = {xe{Z^ + (1/2, 0)) U (Z^ + (0, 1/2)) -.U^Kp}, (8) 

where Ux is iid uniformly distributed in [0, 1]. 

This case is analogous to bond percolation on the two- 
dimensional square lattice [3], so: 

Fact 2 The percolation threshold for G^ is pc = 1/2. 

For p = 1/2, the density of bad guys is 1, the same as the 
density of good guys. So the density of bad guys only needs 
to be a factor 1 — e smaller than the density of good guys, 
and the graph still percolates, for any e > 0. Close to that 
threshold 77' = 1/2. 

If we put the bad guys on the lattice points themselves (with 
probability p), the situation is analogous to site percolation on 
L^, for which the critical probability is unknown but estimated 
to be around 0.59, so Pc ~ 0.41. In this case the maximum 
density of bad guys is only 0.41. 

So it seems having the eavesdroppers at the locations 
indicated in dHJ causes the least "damage" to the connectivity 
of the secrecy graph among all regular ^P. 

IV. Properties of the Poisson Secrecy Graphs 
A. Isolation probabilities for r — 00 

Fact 3 The probability that the origin o cannot talk to anyone 
in Ga,oo (out-isolation) is 

A 



In G> 



JJ^OUt ^ Q] ^ 

¥[N = 0] = 



A + 1 
cA 



cA + 1 



(9) 
(10) 



where c = | + # = 1.609. 



For the directed graph, this is simply the probability that the 
nearest neighbor in the combined process $ U ^I' (of density 
1 + A) is an eavesdropper In the basic graph, let x denote the 
origin's nearest neighbor in $ and let i? = \\x\\. For iV > 0, we 
need Do{R)U D^iR) to be free of eavesdroppers. The area of 
the two intersecting disks is cnR^ for c = 4/3 + \/3/(27r), and 
the probability density (pdf) of R is pii{r) = 27rr exp(— 7rr^) 
(Rayleigh with mean 1/2) [4]. So 

P[7V > 0] = E^[cxp(-Ac7ri?2)] = -J— . (11) 

cA + 1 

The probability of in-isolation P[A^'" = 0] is smaller than 
pjjyout ^ Qj^ since for each node x G $\{o}, there must be 
at least one bad guy in L)3;(||a;||). Clearly, this probability is 
smaller compared to ^ where only the nearest eavesdropper 
matters. On the other hand, the in-degree is less likely than the 
out-degree to be large since a significantly larger area needs 
to be free of bad guys. The isolation probability P[iV' — 0] is 
the smallest of all isolation probabilities. 



B. Degree distributions 

Proposition 4 The out-degree of a in G\^, 
mean 1/ A. 



is geometric with 



Proof: Consider the sequence of nearest neighbors of o 
in the combined process $ U '5. iV°"* — n if the closest n are 
in $ and the (n + l)-st is in ^I^. Since these are independent 
events, 

= n] = ( _J_ I . (12) 



1 + A V 1 + A 



Alternatively, the distribution can be obtained as follows: 
Let R be the distance to the closest bad guy, i.e., R — 
niin.„g^ \\y\\. We have 



p[iv™* = n] = : 



exp(— 7ri? 



2^ (^R^r 



(13) 



where the pdf of R is pR{r) — 27rrA Gxp(— TrAr^). 
For general r, we have: 



Proposition 5 The out-degree distribution of G\ r is 
A(l-i^) +exp(-a)^ 



fiV™* = nl = 



(14) 



(A + l)"+i 

where a = 7rr^(A + 1), and r(-, •) is the upper incomplete 
gamma function. The probability of out-isolation is 

exp(-7rr2(A + 1)) + A 



0] 



1 + A 

and the mean out- and in-degrees are 

jg^out ^ jg^in ^ 1(1 _ exp(-A7rr2)) . 
A 

The mean degree of the basic graph G\^r 
1 



(15) 



(16) 



E7V 
where c = | + 



cA 



(1 — exp(— cATrr )) . 



Proof: If there is no bad guy inside (r) — which is the 
case with probability Po = cxp(— A7rr^) — then the number 
is simply Poisson with mean nr"^ . If there is a bad guy at 
distance R, the number is Poisson with mean nR^. So we 
have 

(7rr2)" 



P[iV°"* = n] =Po cxp(-7 



+ (1 - Po)Efl<r 



exp(— 7ri?' 



which, after some manipulations, yields (fT4l) . The mean is 
obtained more directly using Campbell's theorem [5] which 
says that for stationary point processes with intensity /i in 
and non-negative measurable /, 



= ^ / f{x)dx. 
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Fig. 2. Distribution of tlie node degree with and witliout power constraints. 
The solid bold curve shows the distribution I14t for r = 1 and A = 1/5. The 
dashed curve is the Poisson distribution with mean tt (which results when 
r = 1, A = 0), and the dash-dotted curve is the geometric distribution with 
mean 5 (which results when A = 1/5, r — > oo). 
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Fig. 3. Left: Mean out-degree of Giyio^r- The vertical line goes through 
the inflection point and indicates the boundary between the power-limited and 
the secrecy-Hmited regime. At the inflection point, r = tt = (27rA)~^/^ = 
y5/V ?a 1.26. Right: The curve A = (27rr2)-i 

bordering the power-limited and the secrecy-limited regimes. As r — » oo or 
A — > oo, the network becomes secrecy-limited and the degree distribution is 
geometric. As r — > or A — > 0, the network is power-limited and the degree 
distribution is Poisson. 



(17) Applied to the mean out-degree (/i — 1) we obtain 



g^out ^ ^ eE) = ¥. ^ exp(-A7r||a;f ) 

|a; II <r 

— 271 x exp(— A7rx^)da; 

-'0 



(18) 



By replacing the area 7rr^ by cnr'^ (area of two overlapping 
disks of radius r and distance r), the same calculation yields 

dni). ■ 

The probability of isolation can directly be obtained from 
considering the two possibilities for isolation: Either there is 
no node at all within distance r or there is one node (or more) 
within r and the nearest one is bad. So, using a as in the 
proposition, P[iV°"* = 0] = exp(-a) + (1 - cxp(-a))A/(l + 
A). Since $ has intensity 1, the isolation probability equals 
the density of isolated nodes. 

As A ^ 0, we obtain the Poisson isolation probability and 
for 7- ^ cx) we get the geometric isolation probability ( fT2b . 
Also in ( fT4] i we can observe the expected behavior in the 



limits A, r — > and X,r ^ oo. So the two-parameter distribu- 
tion ( fl4b includes the Poisson distribution and the geometric 
distribution as special cases. Fig.|2] shows an example of the 
resulting distributions for r — 1 and A = 1/5. 

As a function of r, the mean degree increases approximately 
as 7rr^ for small r (this is the region where the degree is 
power-limited) and has a cap at 1/A (due to the secrecy 
condition). Hence there exists a power-limited and a secrecy- 
limited regime, and the inflection point of E,N{r), which is 
tt = (27rA)^^/^ is a suitable boundary. This is illustrated 
in Fig. [3] Generally, the curve 2Trr'^ — 1/X separates the two 
regimes. Note that in the /?ower-limited regime, the distribution 
is close to Foisson, whereas in the secrecy-limited regime, it is 
closer to geometric. Using the maximum slope s of EiV°"'(r), 
a simple piecewise linear upper bound on the mean degree is 



EAr°"*(r) < min{sr, i}, 
A 



(19) 



This bound is reasonably tight for A not too small. 

As a function of A, the mean degree is monotonically 
decreasing from 7rr^ to 0, upper bounded by 1/A. 

The transmission range (power) needed to get within e of 
the maximum mean out-degree (for r = oo) is 



-lege 



Att 



(20) 



For example, ro.oi = 1.21/\/A achieves a mean out-degree of 
0.99/A. 

Next we establish bounds on the node degree distribution 
in the basic graph Ga.oo- Let R be the distance of the nearest 
bad guy. If the second-nearest bad guy is at distance at 
least 2R, which happens with probability cxp(— AvrSi?^), then 
bidirectional secure communication is possible to any good 
guy in the area airR^ where a = 2/3 + V3/(47r) « 0.80 
(circle minus a segment of height R/2). As a lower bound, 
we consider the circle of radius R/2. For sure bidirectional 
communication is possible to any node within that distance. 
(This bound would be tight if there were many more bad guys, 
all at the same distance R.) So we have 



E 



R 



exp(-A) 



Id 



< ¥[N < n] < 



E 

k=Q 



E 



R 



exp(. 



-B) 



IT 



fc=0 

where A = anR"^ and B = birR"^ with b = 1/4. The bounds 
are geometric: 

/ \ n+l / b \ 

Since EiV = J2^W > n], the bounds a/A > EiV > b/X 
for the mean degree follow. From ( fTTI l we already know that 
EN = l/(Ac) « 0.62/A. 

Lastly, in this subsection, we consider the enhanced graph. 



Proposition 6 The mean degree EN' in the enhanced graph 
G\ j. is 

EN' = |(l-exp(-A7rr2))-^(l-exp(-cA7rr2)). (22) 
A cA 



Proof: This follows by combining (|2|i, ( fT6] l, and (Tl\ 

C. Secrecy ratios 

Using the mean degree established in (fTTI l we obtain 

1 — exp(— cAtt?-^) 



r]{X,r) 



cXti 



(23) 



7/(A, r) is decreasing in both r and A. 77' (A, r) follows from 
(|22] |. Of interest are also the relative edge densities of the 
enhanced and basic graphs: 

Fact 7 At least a fraction Stt/ {5n + 3\/3) ~ 0.45 of the edges 
in the enhanced graph G'^ ^ are present in the basic graph 

The ratio EN /EN' is 1 for small Ar^ and reaches its minimum 
as Xr^ 00, where it is (2c — 1)^^ with c as in ( fTTI l. The 
consequence is that in some graphs, more than 50% of the 
links can only be used securely in one direction (unless one- 
time pads are used). 

D. Edge lengths 

We consider the distribution of the length of the edges 
in Ga,oo- For each node, its nearest bad guy determines the 
maximum length of an out-edge. So we intuitively expect the 
edge length distribution to approximately inherit the distribu- 
tion of the distance to the nearest bad guy. Simulation studies 
reveal that indeed the edge length distribution is very close to 
Rayleigh with mean l/(2\/A), with only very slightly higher 
probabilities for longer edges — which is expected since nodes 
whose nearest bad guy is far will have many long edges on 
average and thus skew the distribution. 

In the power-limited regime, with r finite and A ^ 0, the 
edge length pdf converges to the usual 2x/r'^, ^ x ^ r. 

E. Oriented percolation of G\,r 

We are studying oriented out-percolation in G\,r, i.e., the 
critical region in the (A, r)-plane for which there is a positive 
probability that the out-component containing the origin has 
infinite size. 

Fact 8 Xc{r) is monotonically increasing for r > tq, and we 
have 

< lim Xc{r) < 1 . (24) 

r — >oo 

In other words, there exists a Aoo < 1 such that for X > Xoo, 
G'^ ^ does not percolate for any r. 

This follows from the facts that for fixed r the mean degree 
is continuously decreasing to as a function of A, and for 
A < 1, the mean degree is smaller than 1 even for r = 00, so 
percolation is impossible. We will use Aqo to denote the limit 
in ( l24b . For intensities smaller than that, we define 



rc{X) = sup{r : 9{X,r)^0}, X ^ X^ 



(25) 



From the monotonic decrease of the mean degree in A 
follows: 



Fact 9 The percolation radius rdX) is monotonically increas- 
ing with A and has a vertical asymptote at Aoo- 

Conjecture 10 rdX) is convex (and, consequently, Xc{r) is 
concave): 



dA2 



>0 VOs^A<Ao 



It follows that 

''c(A) 5^ re + cA , where c 



A drc(A) 



dA 



A=0 



(26) 



(27) 



Simulation results show that Aqc ~ 0.1499 with a standard 
deviation of 5.8 • 10^'* over 200 runs. 



Critical density 
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Fig. 4. The simulated critical density Ac(r) vs. log]^Q(r) together with a 
simple exponential approximation. Each simulated point is the average of 30 
runs. 

Since Ac(r) is concave and converges to a finite Aoo, we 
may conjecture that it can be well approximated by a function 
of the form: 



Ac(r) w Aoo - exp(a - br) , r > tq . 



(28) 



where a and b are related through a = log Aoo + brQ . Indeed 
simulation results (see Fig.|4|i reveal that for 6 = 4, Aoo — 
0.1499, and a = 2^2, we obtain an excellent approximation. 
Similarly, 

rc(A) ~'^-\ log(Aoo - A) , A < Aoo . (29) 



It follows that the constant c in Conj.[TO]is c = (6Aoo)^^ = 
5/3, and the slope of \c{r) at r = is 3/5. 

For the critical graph GA,r<:(A), it turns out that both P[iV = 
0] and 'EN are increasing with A. 

A good empirically derived approximation is 



P[7Vr = 0]«^ + ^A, A<Ao 



For the mean out-degree we have from ( fTSI l and ( |29] ) 

11 

T 



(30) 



(31) 



EiV°"' (A) is convex and reaches 1 / Aoo at A = Aoo per Prop.|4] 
So percolation on the secrecy graph requires a higher mean 
degree than Gilbert's disk graph. Since the disk graph was 
shown to require the highest mean degree among all germ- 
grain random geometric graphs [6]-[8], we have established 
that: 

Fact 11 The secrecy graph is not equivalent to any germ- 
grain random geometric graph. 

V. Concluding Remarks 

We have introduced a new class of random geometric graphs 
that captures the condition for secure communications in ad 
hoc networks. For the lattice-based models, there exist direct 
analogies to bond and site percolation problems. In Poisson- 
based networks, we have derived the mean node degrees 
and, in some cases, the distribution. As a byproduct, a two- 
parameter distribution was found that includes the Poisson and 
the geometric distribution as special cases. Based on the mean 
degree, we defined power- and secrecy-limited regions in the 
(A, r)-plane. The percolation region {(r, A) : 6{r, A) > 0} was 
bounded and numerically determined. In conclusion, the pres- 
ence of eavesdroppers is rather harmful in the random case. 
A (relative) density of 0.15 is sufficient to make percolation 
impossible. Many interesting problems remain open; we hope 
that this initial study sparks further investigations. 
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